This advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to thefollowing package versions:

Ubuntu 5.10: openoffice.org2-core 1.9.129-0.1ubuntu4.2

Ubuntu 6.06 LTS: openoffice.org-core 2.0.2-2ubuntu12.2

In general, a standard system upgrade is sufficient to effect thenecessary changes.

Details follow:

An integer overflow was discovered in OpenOffice.org's handling of WMFfiles. If a user were tricked into opening a specially crafted WMF=20file, an attacker could execute arbitrary code with user privileges.